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FIG. 3A 

A USER OPERATES A USER UNIT AND INSERTS A SMART 
CARD IN A SMART CARD RECEPTACLE IN THE USER UNIT 



THE USER ESTABLISHES COMMUNICATION WITH A 
COMMUNICATION NETWORK VIA THE USER UNIT 



DOES THE SMART 
CARD INCLUDE ADMINISTRATOR 
IDENTIFICATION INFORMATION OF 
A REMOTE ADMINISTRATOR? 



NO 



A MESSAGE INDICATING THAT 
THE SMART CARD IS USED 
FOR THE FIRST TIME IS 
DISPLAYED TO THE USER 



YES 



ADMINISTRATOR IDENTIFICATION 
INFORMATION ALREADY STORED 
IN THE SMART CARD IS 
EMPLOYED TO IDENTIFY 
A REMOTE ADMINISTRATOR 
ASSOCIATED WITH THE SMART CARD 



COMMUNICATION BETWEEN THE 
SMART CARD AND THE REMOTE 
ADMINISTRATOR IS ESTABLISHED VIA 
THE COMMUNICATION NETWORK 
IN ACCORDANCE WITH THE 
ADMINISTRATOR IDENTIFICATION 
INFORMATION 



TO FIG. 3B 




FIG. 3B 



FROM FIG. 3A 



THE USER ENTERS A REQUEST 
TO ASSOCIATE THE SMART CARD 
TO A REMOTE ADMINISTRATOR 



THE SMART CARD IS ASSOCIATED WITH A REMOTE 
ADMINISTRATOR BY STORING ADMINISTRATOR 
IDENTIFICATION INFORMATION OF THE REMOTE 
ADMINISTRATOR IN THE SMART CARD 



t ][ 

AN ADMINISTRATION INITIALIZATION PROCEDURE IS PERFORMED 



IS THE ADMINISTRATION 
INITIALIZATION PROCEDURE TERMINATED 
BY DETERMINING THAT THE SMART CARD IS 
AT LEAST ONE OF AUTHENTICATED 
miDATED AND VERIFIED? 



NO 



YES 



THE USER IS GRANTED ACCESS TO A PROTECTED 
INFORMATION RESOURCE VIA THE COMMUNICATION NETWORK 



A MESSAGE INDICATING 
THAT THE USER IS NOT 
ENTITLED TO ACCESS THE 
PROTECTED INFORMATION 
RESOURCE IS GENERATED 




END 




START 



FIG. 4 



COMMUNICATION BETWEEN A REMOTE UNIT AND AN INFORMATION 
RESOURCE CONTROLLER WHICH INTERFACES AND ACCESSES AN 
INFORMATION RESOURCE IS ESTABLISHED VIA A COMMUNICATION NETWORK 



COUNT=0 
^ 



A COMMAND TO. UPLOAD DATA IS IDENTIFIED AT A SMART CARD AT 

THE REMOTE UNIT 



I 



A HASH FUNCTION AT THE REMOTE UNIT IS EMPLOYED TO ENCODE 
CONTENTS OF AT LEAST A PORTION OF A SMART CARD MEMORY AT THE REMOTE 
UNIT AND THEREBY TO PRODUCE A HASHED RESULT 



T 



THE HASHED RESULT IS TRANSMIHED TO THE 
INFORMATION RESOURCE CONTROLLER 



THE HASHED RESULT RECEIVED AT THE INFORMATION RESOURCE 
CONTROLLER IS COMPARED WITH A TRUSTED HASHED RESULT 
MAINTAINED AT THE INFORMATION RESOURCE CONTROLLER 
THEREBY TO PROVIDE A COMPARISON RESULT 



IS THE 
COMPARISON RESULT 
FAVORABLE? 

YES 



NO 



INTEGRITY OF THE CONTENTS OF THE AT 
LEAST A PORTION OF THE MEMORY AT 
THE REMOTE UNIT IS DETERMINED 



REVOKE THE SMART 
CARD. AND CANCEL 
AUTHORIZATIONS TO 
THE SMART CARD 



GENERATE A MESSAGE 

INDICATING THAT 
THE SMART CARD IS 
REVOKED 



N 




END 




COUNT= 
COUNT+1 



THE INFORMATION RESOURCE 
CONTROLLER TRANSMITS REPAIRING 
INFORMATION TO THE REMOTE UNIT 
TO CORRECT THE CONTENTS OF THE AT 
LEAST A PORTION OF THE MEMORY AT 
THE REMOTE UNIT 




A FIRST USER OPERATES A FIRST USER UNIT AND INSERTS 
A FIRST SMART CARD IN A SMART CARD RECEPTACLE IN 
THE FIRST USER UNIT 



A SECOND USER OPERATES A SECOND USER UNIT AND 
INSERTS A SECOND SMART CARD IN A SMART CARD 
RECEPTACLE IN THE SECOND USER UNIT 



THE FIRST USER AND THE SECOND USER ESTABLISH 
COMMUNICATION WITH A REMOTE ADMINISTRATOR VIA 
A COMMUNICATION NETWORK AND THE CORRESPONDING 
FIRST AND SECOND USER UNITS 



THE FIRST SMART CARD AND THE SECOND SMART CARD 
ARE ASSOCIATED WITH THE REMOTE ADMINISTRATOR 



THE FIRST USER ENTERS A COMMAND TO TRANSMIT 
AUTHORIZATION INFORMATION FROM THE FIRST SMART 
CARD TO THE SECOND SMART CARD VIA THE REMOTE 

ADMINISTRATOR AND THE COMMUNICATION NETWORK 



THE SECOND USER PERFORMS TRANSACTIONS AUTHORIZED BY 
THE FIRST USER WITH A PROTECTED INFORMATION RESOURCE 
VIA THE REMOTE ADMINISTRATOR BY USING THE SECOND SMART CARD 




